Removed some commented code and added more description to the HTTP Splitting lesson
git-svn-id: http://webgoat.googlecode.com/svn/trunk@38 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
@ -21,4 +21,5 @@ but also allows them to create additional responses entirely under their control
|
||||
* You notice that the application is redirecting your request to another resource on the server.<br>
|
||||
* You should be able to use the CR (%0d) and LF (%0a) to exploit the attack.<br>
|
||||
* Your excercise should be to force the server to send a 200 OK.
|
||||
* If the screen changed as an effect to your attack, just go back to the homepage where you will find the lesson completed if you successfully exploited the attack.
|
||||
<!-- Stop Instructions -->
|
||||
|
Reference in New Issue
Block a user